Ticket #19862: 19862.patch

wp-admin/includes/ms.php

@@ -658 +658 @@
         <?php if ( in_array( get_site_option( 'registration' ), array( 'all', 'blog' ) ) ) : ?>
                 <tr>
                         <th scope="row" colspan="2" class="th-full">
-                                <a href="<?php echo apply_filters( 'wp_signup_location', network_home_url( 'wp-signup.php' ) ); ?>"><?php _e( 'Create a New Site' ); ?></a>
+                                <a href="<?php echo esc_url( apply_filters( 'wp_signup_location', network_home_url( 'wp-signup.php' ) ) ); ?>"><?php _e( 'Create a New Site' ); ?></a>
                         </th>
                 </tr>
         <?php endif; ?>

wp-includes/admin-bar.php

@@ -332 +332 @@
                 ) );
         }
 
+        if ( in_array( get_site_option( 'registration' ), array( 'all', 'blog' ) ) ) {
+                $wp_admin_bar->add_menu( array(
+                        'parent' => 'my-sites-super-admin',
+                        'id'     => 'create-site',
+                        'title'  => __( 'Create a New Site' ),
+                        'href'   => esc_url( apply_filters( 'wp_signup_location', network_home_url( 'wp-signup.php' ) ) ),
+                ) );
+        }
+
         // Add site links
         $wp_admin_bar->add_group( array(
                 'parent' => 'my-sites',